Do you manually set `authorize! :update, @post` in every action then?